Privacy Policy
How InnoSfera EU processes, protects, and handles B2B entity and corporate contact data under Regulation (EU) 2016/679 (GDPR).
Document Notice: This privacy notice applies to visitors, enterprise clients, and software licence transfer counterparties interacting with InnoSfera EU (operated by Przemysław Stasz, NIP: PL6831969619).
1. Data Controller Identification
The controller of personal and business contact data processed through the innosfera.eu portal is InnoSfera — Przemysław Stasz, registered in Poland (NIP: 6831969619, REGON: 122464732), with registered address at ul. Reformacka 26, 32-020 Wieliczka, Poland. Direct legal and privacy inquiries may be submitted via email to a.stasz@innosfera.eu.
2. Categories of Data Collected
We process professional contact information necessary for B2B communications, contract execution, and software licence transfer auditing, including:
- Corporate contact details (name, business email address, direct phone number, company role).
- Entity identification data (company name, registered address, EU VAT identification number).
- Licence inventory data submitted for valuation or procurement auditing.
- Technical interaction logs (IP address, browser user-agent, session cookies for anti-spam security).
3. Legal Basis for Processing
Data processing activities are conducted pursuant to Article 6(1) of the GDPR:
- Art. 6(1)(b) GDPR: Processing necessary for the performance of a B2B contract or pre-contractual licence valuation.
- Art. 6(1)(c) GDPR: Compliance with statutory legal and tax obligations in the European Union.
- Art. 6(1)(f) GDPR: Legitimate business interests in securing infrastructure, preventing fraud, and verifying software ownership chains.
4. Data Retention & Third-Party Transfers
B2B correspondence and transaction records are retained for the statutory accounting period mandated by EU law (5 years). We do not sell or commercialise corporate data. Data may be shared strictly with authorized professional service providers (auditors, legal advisors, hosting infrastructure) under binding GDPR Data Processing Agreements (DPAs).
5. Data Subject Rights
Under GDPR, corporate representatives maintain full rights to request access, rectification, erasure, restriction of processing, and data portability. Complaints may also be lodged with the relevant supervisory authority (in Poland: UODO - Urząd Ochrony Danych Osobowych).